Filename Subject Text vs. Content Subject Text

[Mariano Absatz]

Hi, 

I'm using MS 4.23-11 with SA 2.55.

It seems MS is somehow confusing "Filename Subject Text" "Content Subject 
Text".

I have the following settings:
Allow IFrame Tags = no
Log IFrame Tags = yes
Allow Form Tags = no
Allow Object Codebase Tags = no
Filename Modify Subject = no
Filename Subject Text = {Nombre de archivo anexo prohibido}
Content Modify Subject = yes
Content Subject Text = {Contenido potencialmente peligroso}

And, when getting a message with IFrame, it added the "Filename Subject Text" 
instead of the "Content Subject Text" I expected.

Here's the log:

Sep  5 14:43:51 or MX[4995]: New Batch: Scanning 1 messages, 43452 bytes 
Sep  5 14:43:51 or MX[4995]: Spam Checks: Starting 
Sep  5 14:43:54 or MX[4995]: Virus and Content Scanning: Starting 
Sep  5 14:43:54 or MX[4995]: Filename Checks: Allowing msg-4995-156.html (no 
rule matched) 
Sep  5 14:43:54 or MX[4995]: Filename Checks: Allowing msg-4995-155.txt 
Sep  5 14:43:54 or MX[4995]: Filetype Checks: Allowing msg-4995-155.txt 
Sep  5 14:43:54 or MX[4995]: Filetype Checks: Allowing msg-4995-156.html 
Sep  5 14:43:54 or MX[4995]: HTML IFrame tag found in message 1221617 from 
boletininformar at redinformar.com.ar 
Sep  5 14:43:54 or MX[4995]: Content Checks: Detected HTML-specific exploits 
in 1221617 
Sep  5 14:43:54 or MX[4995]: Content Checks: Found 1 problems 
Sep  5 14:43:54 or MX[4995]: ZM: message 1221617 renamed into 1156463 
Sep  5 14:43:54 or MX[4995]: Silent: Delivered 1 messages containing silent 
viruses 


And the modified was:
{Nombre de archivo anexo prohibido} RI-Boletín Informar Computación: Año 1 - 
Número 51 - SEPTIEMBRE 5, 2003


Are these entries mixed up?


--
Mariano Absatz
El Baby
----------------------------------------------------------
"Walking on water and developing software from a specification
are easy if both are frozen."
               -- Edward V. Berard, "Life-Cycle Approaches"